Talk:Federated identity

Internet Mid‑importance

	Internet portal This article is within the scope of WikiProject Internet, a collaborative effort to improve the coverage of the Internet on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.InternetWikipedia:WikiProject InternetTemplate:WikiProject InternetInternet articles
Mid	This article has been rated as Mid-importance on the project's importance scale.

Computer Security: Computing High‑importance

This article is within the scope of WikiProject Computer Security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Computer SecurityWikipedia:WikiProject Computer SecurityTemplate:WikiProject Computer SecurityComputer Security articles

High

This article has been rated as High-importance on the project's importance scale.

This article is supported by WikiProject Computing (assessed as High-importance).

Things you can help WikiProject Computer Security with:

Article alerts will be generated shortly by AAlertBot. Please allow some days for processing. More information...

Review importance and quality of existing articles
Identify categories related to Computer Security
Tag related articles
Identify articles for creation (see also: Article requests)
Identify articles for improvement
Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc.
Find editors who have shown interest in this subject and ask them to take a look here.

Liberty Alliance only example

The example given is of the definition that originated with the Liberty Alliance.

Here's an elaboration of the other concept of federated identity that has appeared in the Internet2 community and elsewhere. The higher education federation (for example) is a group of organizations (universities) that agree to accept and trust each other's local authentication process. That is, each university manages the credentials of its own population but also needn't manage the credentials of potential visitors form elsewhere.

Federation is something that organizations do; they join a federation. They agree about some things (e.g. that they will trust each other), but also agree to disagree about other matters (e.g. precisely how the credentialing process is performed at each institution and precisely how cerdentials are verified at each institution.

The Liberty Alliance definition is really more about something that users do. Each user agrees that their identity information can be shared among organizations of their choosing.

Link to EduRoam example

I suggest linking information about Eduroam - the federated identity system in use in Europe, Australia and Canada —Preceding unsigned comment added by 129.100.113.215 (talk) 12:57, 15 October 2008 (UTC)[reply]

I suggest adding links to Edugain (it federates federations) and to simpleSAMLphp (I'm trying to add the article to the wiki). Blink0gmailcom (talk) 00:58, 19 November 2008 (UTC)[reply]

Centralised identity or federated

The definition of “federated identity” cited says this:

When a user affiliated with a member of a federation requests a protected resource from another member organization, the user is prompted for identifying information including his “home” organization. This request is passed to the home organization, which verifies the user’s credentials and asserts to the requesting organization that the user has been authenticated.

This is contradicted by the examples of centralised identity providers, where the user is *not* prompted for their choice of provider: only an explicitly-supported specific provider can be used.

So it is not sufficient to have “a common set of policies, practices and protocols in place to manage the identity and trust into IT users and devices across organizations” as the article currently states. Crucial to a *federated* system is surely that the parties do not need to approve on a party-by-party basis, but only that the party is a participant in the federation.

This would mean that systems prompting for *explicitly* an exclusive set of identity providers – e.g. Facebook, Google, GitHub – are by definition not federated identity systems, but centralised-identity systems.

220.245.37.174 (talk) 08:50, 24 August 2016 (UTC)[reply]